Export limit exceeded: 425948 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2008-7267

SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Boka
Products
Siteengine
CVE-2008-7268

The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to php_info in misc.php.

CVSS 2.0 · 5.0 Medium EPSS 1.6% KEV · Not listed
Vendors
Boka
Products
Siteengine
CVE-2008-7269

Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter in a logout action.

CVSS 2.0 · 5.8 Medium EPSS 8.2% KEV · Not listed
Vendors
Boka
Products
Siteengine
CVE-2010-4357

SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands via the module parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Boka
Products
Siteengine